IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade librados2-develUpgrade ceph-common-debuginfoUpgrade python-radosUpgrade ceph-commonUpgrade librbd1-develUpgrade python-rbdUpgrade librados2Upgrade librbd1 | Oct 23, 2023 | Oct 23, 2023 |
| Centos_linux | — | Upgrade ceph-fuse-debuginfoUpgrade librgw2-debuginfoUpgrade python3-ceph-commonUpgrade librgw-develUpgrade python3-rados-debuginfoUpgrade libcephfs2-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cache-debuginfoUpgrade python3-radosUpgrade ceph-commonUpgrade ceph-immutable-object-cacheUpgrade libcephfs-develUpgrade rbd-nbd-debuginfoUpgrade librados-develUpgrade libcephfs2Upgrade python3-rbd-debuginfoUpgrade ceph-debuginfoUpgrade librados-devel-debuginfoUpgrade libcephsqlite-debuginfoUpgrade ceph-baseUpgrade libradosstriper1Upgrade ceph-test-debuginfoUpgrade librbd-develUpgrade ceph-fuseUpgrade python3-cephfs-debuginfoUpgrade ceph-base-debuginfoUpgrade python3-ceph-argparseUpgrade rbd-mirror-debuginfoUpgrade librgw2Upgrade cephadmUpgrade python3-rgw-debuginfoUpgrade python3-rbdUpgrade libradospp-develUpgrade ceph-osd-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-debugsourceUpgrade rbd-nbdUpgrade cephfs-topUpgrade ceph-selinuxUpgrade cephadm-ansibleUpgrade libradosstriper1-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-exporter-debuginfoUpgrade python3-rgwUpgrade ceph-mds-debuginfoUpgrade python3-cephfsUpgrade ceph-mibUpgrade ceph-resource-agentsUpgrade ceph-mgr-debuginfoUpgrade ceph-common-debuginfo | Nov 1, 2023 | Oct 12, 2023 |
| Debian | — | Upgrade ceph | Oct 25, 2023 | Oct 25, 2023 |
| Redhat_linux | — | Upgrade libradospp-develUpgrade libcephfs2Upgrade python3-cephfsUpgrade python3-rgw-debuginfoUpgrade librgw-develUpgrade ceph-fuse-debuginfoUpgrade rbd-nbd-debuginfoUpgrade ceph-commonUpgrade python3-rgwUpgrade libradosstriper1-debuginfoUpgrade ceph-debuginfoUpgrade ceph-mibUpgrade librados-develUpgrade python3-ceph-argparseUpgrade librgw2-debuginfoUpgrade ceph-baseUpgrade python3-radosUpgrade ceph-selinuxUpgrade ceph-debugsourceUpgrade libcephfs-develUpgrade python3-rados-debuginfoUpgrade librgw2Upgrade libcephsqlite-debuginfoUpgrade rbd-nbdUpgrade python3-rbdUpgrade ceph-resource-agentsUpgrade cephfs-topUpgrade libcephfs2-debuginfoUpgrade ceph-mon-debuginfoUpgrade ceph-common-debuginfoUpgrade ceph-fuseUpgrade ceph-immutable-object-cache-debuginfoUpgrade libradosstriper1Upgrade cephadmUpgrade rbd-mirror-debuginfoUpgrade librbd-develUpgrade python3-cephfs-debuginfoUpgrade ceph-radosgw-debuginfoUpgrade ceph-exporter-debuginfoUpgrade python3-ceph-commonUpgrade ceph-base-debuginfoUpgrade rbd-fuse-debuginfoUpgrade ceph-immutable-object-cacheUpgrade ceph-osd-debuginfoUpgrade cephfs-mirror-debuginfoUpgrade python3-rbd-debuginfoUpgrade ceph-mgr-debuginfoUpgrade cephadm-ansibleUpgrade librados-devel-debuginfoUpgrade ceph-test-debuginfoUpgrade ceph-mds-debuginfo | Nov 1, 2023 | Oct 12, 2023 |
| Ubuntu | — | Upgrade ceph-baseUpgrade cephUpgrade ceph (Ubuntu Pro)Upgrade ceph-commonUpgrade ceph-base (Ubuntu Pro)Upgrade ceph-common (Ubuntu Pro) | Jan 30, 2024 | Jan 29, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub